Does Firefox support wildcards in NTLM / Negotiate URI's for autologin?

Following this question about Windows Domain Authentication with Firefox, does FF support using wildcards in the URI's? I'm not finding anything where it mentions support either way.

squillman

Posted 2009-07-21T15:57:03.293

Reputation: 5 676

Have you tried it? – random – 2009-08-03T14:07:15.490

Yes, I have.... – squillman – 2009-08-04T01:40:34.457

So that means it doesn't work then? Or does it? – random – 2009-08-08T04:16:34.660

2Sorry, thought that would be clear since I'm asking. No, my efforts didn't work. I was looking around to find out if FF just simply does not support it or if maybe my wildcard syntax was just wrong. – squillman – 2009-08-08T13:29:31.980

1I was interested in this because I wanted to support any port on localhost. As it turns out, just http://localhost works fine. – Matthew Flaschen – 2011-07-19T22:23:00.743

Answers

Just to expand on redbeard0x0a's answer, it seems that it's matching based on the end of the string, not a sub string. So, if you have a company domain like "mycompany.com" with servers like svn.mycompany.com, sharepoint.mycompany.com, mail.mycompany.com, you could modify the network.automatic-ntlm-auth.trusted-uris within about:config to:

svn.mycompany.com,sharepoint.mycompany.com,mail.mycompany.com

or just include them all and any other internal servers by doing:

mycompany.com

rcl

Posted 2009-07-21T15:57:03.293

Reputation: 376

Note that you need at least on dot for it to be a wildcard. So if you can host1.hr.europe.company1. Then company1 will not work, you need to put europe.company1. I guess if there is no dot firefox assumes it's a hostname not a domain name. – David Roussel – 2010-05-05T08:53:48.183

Just to add to this, I found that mycompany.com had to be at the end of the list if I had any more specific entries. For example http://localhost,.mycompany.com worked, but .mycompany.com,http://localhost did not work. Mine is now working fine, but I hope this helps someone. – oliver-clare – 2016-06-13T16:06:32.893

4I think you'll want to use ".mycompany.com", leaving that leading dot out would match "notmycompany.com". – davenpcj – 2010-10-29T20:23:50.063

@David @davenpcj I wish I could use example.*, i.e. example.com, example.net, etc – abatishchev – 2011-01-24T09:05:49.237

I don't know if I understand the question correctly, but I'm thinking you are trying to use a wildcard in the network.authentication-ntlm-auth.trusted-uris inside firefox's config.

I think everything is matched on a sub-string (internally it seems to work like *example.local*, so having the domain example.local you would put example.local in the configuration, for example: localhost,fileserver,example.local.

If you end up having a url of http://server1.example.local/, it should trigger the example.local entry for trusted-uris and seamlessly send over NTLM authentication.

Bryan Rehbein

Posted 2009-07-21T15:57:03.293

Reputation: 171